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IN THE CLAIMS 

1-112. (Cancelled). 

113. (Previously Presented) A communications device comprising: 
a subsystem, wherein 

the subsystem comprises a communications interface; and 
a logging module coupled to the subsystem, wherein 

the logging module is configured to periodically communicate information 

regarding a configuration of the subsystem, and 
the logging module is further configured to restrict a change to a 

configuration of the logging module by the subsystem. 

1 14. (Previously Presented) The communications device of claim 1 13, wherein 
the logging module is further configured to restrict the change to the configuration 

of the logging module via the communications interface. 

115. (Original) The communications device of claim 113, wherein 

the logging module is configured to periodically communicate the information by 
virtue of being configured to automatically transmit a first copy of a 
configuration of the subsystem at a first time and a second copy of a 
configuration of the subsystem at a second time. 

116. (Original) The communications device of claim 115, wherein 

the logging module is further configured to communicate the information to a 
security monitor coupled to the communications device. 

1 17. (Original) The communications device of claim 116, wherein 

the security monitor is configured to detect a change in a configuration of the 
subsystem by a comparison of the first and the second copies. 



-2- 



Application No.: 10/675,506 



PATENT 

118. (Original) The communications device of claim 1 17, wherein 
the security monitor is configured to set the communications device to an 

"untrustworthy" status in response to the change. 

119. (Original) The communications device of claim 118, wherein 

the security monitor is configured to disconnect the communications device from 
the network in response to the communications device being set to the 
"untrustworthy" status. 

120. (Original) The communications device of claim 1 17, wherein 
the logging module is further configured to restrict the subsystem from 

broadcasting using a logging module network address and a logging 
module communications protocol. 

121. (Cancelled) 

122. (Original) The communications device of claim 113, wherein 

the logging module is further configured to broadcast a data packet using a 

logging module network address and a logging module communications 
protocol. 

123. (Original) The communications device of claim 122, wherein 

the logging module is further configured to communicate the information by 

broadcasting the data packet, wherein the data packet comprises at least a 
portion of the information. 

124. (Original) The communications device of claim 123, wherein 

the logging module is configured to broadcast the information to a security 
monitor coupled to the subsystem via a network. 
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125. (Original) The communications device of claim 124, wherein 
the security monitor is configured to set the communications device to an 

"untrustworthy" status in response to the information indicating a change 
to the configuration of the subsystem. 

126. (Original) The communications device of claim 125, wherein 

the security monitor is configured to disconnect the communications device from 
the network in response to the communications device being set to the 
"untrustworthy" status. 

127. (Original) The communications device of claim 122, wherein 
the logging module is further configured to restrict the subsystem from 

broadcasting using the logging module network address and the logging 
module communications protocol. 

128. (Original) The communications device of claim 127, wherein 

the logging module is further configured to broadcast using a logging module 
network address and a logging module communications protocol. 

129. (Previously Presented) The communications device of claim 128, wherein 
the logging module is further configured to restrict the change to the configuration 

of the logging module via the communications interface. 

130. (Original) The communications device of claim 128, wherein 

the logging module is further configured to broadcast the information to a security 
monitor coupled to the communications interface via a network. 

131. (Currently Amended) A method comprising: 

detectine a change in a confi2uration of a subsystem of a communications 
device; and 

periodically communicating information regarding [[a]] the configuration of [[a]] 
the subsystem of [[a]] the communications device, wherein 
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the information is regarding an occurrence of [[a]] the change in the 

configuration, and 
the subsystem comprises a communications interface. 

132. (Cancelled) 

133. (Cancelled) 

134. (Cancelled) 

135. (Previously Presented) The method of claim 131, wherein the periodically 
communicating comprises: 

periodically broadcasting the information to a security monitoring process 
executing on a security monitor communicatively coupled to the 
communications interface. 

136. (Original) The method of claim 135, further comprising: 

causing the security monitoring process to set the communications device to an 
"untrustworthy" status in response to the security monitoring process 
failing to receive the information within a time period. 

137. (Original) The method of claim 136, further comprising: 
disconnecting the communications device from the network in response to the 

security monitoring process setting the communications device to the 
"untrustworthy" status. 

138. (Original) The method of claim 131, further comprising: 
determining the configuration. 

139. (Cancelled) 

140. (Original) The method of claim 138, wherein 
the information comprises a change in the configuration. 
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141. (Original) The method of claim 138, further comprising: 

executing a logging process in a logging module of the communications device, 
wherein the logging process performs the periodically communicating 
information. 

142. (Currently Amended) The method of claim 141, further comprising: 
detecting a change in the configuration, wherein the logging process performs 

the detecting. 

143. (Cancelled) 

144. (Previously Presented) The method of claim 141, wherein the periodically 
communicating comprises: 

periodically broadcasting the information using the communications interface. 

145. (Original) The method of claim 144, wherein the periodically 
broadcasting is performed using: 

a logging module network address, and 

a logging module communications protocol. 

146. (Original) The method of claim 144, wherein the periodically 
broadcasting comprises: 

periodically broadcasting the information to a security monitoring process 

executing on a security monitor coupled to the communications interface 
via a network. 

147. (Original) The method of claim 146, further comprising: 

setting the communications device to an "untrustworthy" status in response to 

receiving the information, wherein the setting is performed by the security 
monitoring process. 



-6- 



Application No.: 10/675,506 



PATENT 

148. (Original) The method of claim 147, further comprising: 
disconnecting the communications device from the network in response to the 

setting the communications device to the "untrustworthy" status. 

149. (Previously Presented) The method of claim 141, further comprising: 
executing a communications process in the communications interface according 

to a configuration of the communications interface. 

150. (Original) The method of claim 149, further comprising: 
restricting a change to the configuration of the logging module by the 

communications process. 

151. (Original) The method of claim 150, wherein the executing the logging 
process further comprises: 

periodically broadcasting via the communications interface using a logging 

module network address and a logging module communications protocol. 

152. (Original) The method of claim 151, wherein the executing the logging 
process further comprises: 

restricting the communications process such that the communications process 
cannot broadcast using the logging module network address and the 
logging module communications protocol. 

153. (Original) The method of claim 138, wherein the periodically 
communicating comprises: 

periodically broadcasting the information using the subsystem. 

154. (Original) The method of claim 153, wherein the periodically 
broadcasting is performed using: 

a logging module network address, and 

a logging module communications protocol. 
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155. (Original) The method of claim 154, wherein the periodically 
broadcasting comprises: 

periodically broadcasting the information to a security monitoring process 

executing on a security monitor coupled to the communications device via 
a network. 

156. (Original) The method of claim 155, further comprising: 

setting the communications device to an "untrustworthy" status in response to 

receiving the information, wherein the setting is performed by the security 
monitoring process. 

157. (Original) The method of claim 156, further comprising: 
disconnecting the communications device from the network in response to the 

setting the communications device to the "untrustworthy" status. 

158. (Previously Presented) A communications device comprising: 
a logging module; 

a communications interface; 

a subsystem, wherein 

the subsystem and the logging module are coupled to one another, and 
the subsystem comprises the communications interface; 

means for periodically communicating information regarding a configuration of 
the subsystem, wherein 

the means for periodically communicating information is coupled to the 
subsystem; 

means for determining the configuration; and 

means for executing a logging process in the logging module, wherein 

the logging process causes the periodically communicating information. 
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159. (Cancelled) 

160. (Previously Presented) The communications device of claim 158, wherein 
the means for periodically communicating comprises: 

means for periodically broadcasting the information to a security monitoring 

process executing on a security monitor communicatively coupled to the 
communications interface. 

161. (Original) The communications device of claim 160, further comprising: 
means for causing the security monitoring process to set the communications 

device to an "untrustworthy" status in response to the security monitoring 
process failing to receive the information within a time period. 

162. (Original) The communications device of claim 161, further comprising: 
means for disconnecting the communications device from the network in response 

to the security monitoring process setting the communications device to 
the "untrustworthy" status. 

163. (Cancelled) 

164. (Previously Presented) The communications device of claim 158, wherein 
the means for periodically communicating comprises: 

means for periodically broadcasting the information using the communications 
interface. 

165. (Original) The communications device of claim 164, wherein the means 
for periodically broadcasting comprises: 

means for periodically broadcasting the information to a security monitoring 

process executing on a security monitor coupled to the communications 
interface via a network. 
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166. (Original) The communications device of claim 165, further comprising: 
means for setting the communications device to an "untrustworthy" status in 

response to receiving the information, wherein the setting is performed by 
the security monitoring process. 

167. (Original) The communications device of claim 166, further comprising: 
means for disconnecting the communications device from the network in response 

to the setting the communications device to the "untrustworthy" status. 

168. (Original) The communications device of claim 166, further comprising: 
means for executing a communications process in the communications interface 

according to a configuration of the communications interface. 

169. (Original) The apparatus of claim 168, further comprising: 

means for restricting a change to the configuration of the logging module by the 
communications process. 

170. (Previously Presented) The apparatus of claim 169, wherein the means for 
executing the logging process further comprises: 

means for periodically broadcasting via the communications interface using a 
logging module network address and a logging module communications 
protocol. 

171. (Previously Presented) The apparatus of claim 170, wherein the means for 
executing the logging process further comprises: 

means for restricting the communications process such that the communications 
process cannot broadcast using the logging module network address and 
the logging module communications protocol. 

172. (Previously Presented) A computer program product comprising: 
a first set of instructions, executable on a computer system, configured to 

periodically communicate information regarding a configuration of a 
subsystem of a communications device; 
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a second set of instructions, executable on said computer system, configured to 

determine the configuration; 
a third set of instructions, executable on said computer system, configured to 

execute a logging process in a logging module of the communications 

device, wherein 

the logging process comprises the second set of instructions, and 
the subsystem comprises a communications interface; and 
computer readable storage media, wherein said computer program product is 
encoded in said computer readable storage media. 

173. (Cancelled) 

174. (Previously Presented) The computer program product of claim 172, 
wherein said first set of instructions comprises: 

a first subset of instructions, executable on said computer system, configured to 
periodically broadcast the information to a security monitoring process 
executing on a security monitor communicatively coupled to the 
communications interface. 

175. (Previously Presented) The computer program product of claim 174, 
further comprising: 

a fourth set of instructions, executable on said computer system, configured to 

cause the security monitoring process to set the communications device to 
an "untrustworthy" status in response to the security monitoring process 
failing to receive the information within a time period. 

176. (Previously Presented) The computer program product of claim 175, 
further comprising: 

a fifth set of instructions, executable on said computer system, configured to 

disconnect the communications device from the network in response to the 
security monitoring process setting the communications device to the 
"untrustworthy" status. 
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177. (Cancelled) 

178. (Previously Presented) The computer program product of claim 172, 
wherein said first set of instructions comprises: 

a first subset of instructions, executable on said computer system, configured to 
periodically broadcast the information using the communications 
interface. 

179. (Original) The computer program product of claim 178, wherein said first 
subset of instructions comprises: 

a first sub-subset of instructions, executable on said computer system, configured 
to periodically broadcast the information to a security monitoring process 
executing on a security monitor coupled to the communications interface 
via a network. 

180. (Original) The computer program product of claim 179, further 
comprising: 

a fourth set of instructions, executable on said computer system, configured to set 
the communications device to an "untrustworthy" status in response to 
receiving the information, wherein the setting is performed by the security 
monitoring process. 

181. (Previously Presented) The computer program product of claim 180, 
further comprising: 

a fifth set of instructions, executable on said computer system, configured to 

disconnect the communications device from the network in response to the 
setting the communications device to the "untrustworthy" status. 

182. (Previously Presented) The computer program product of claim 172, 
further comprising: 

a fourth set of instructions, executable on said computer system, configured to 
execute a communications process in the communications interface 
according to a configuration of the communications interface. 
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183. (Original) The computer program product of claim 182, further 
comprising: 

a fifth set of instructions, executable on said computer system, configured to 
restrict a change to the configuration of the logging module by the 
communications process. 

184. (Original) The computer program product of claim 183, wherein said 
third set of instructions comprises: 

a first subset of instructions, executable on said computer system, configured to 
periodically broadcast via the communications interface using a logging 
module network address and a logging module communications protocol. 

185. (Original) The computer program product of claim 184, wherein said 
third set of instructions further comprises: 

a second subset of instructions, executable on said computer system, configured 
to restrict the communications process such that the communications 
process cannot broadcast using the logging module network address and 
the logging module communications protocol. 
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